{"format":1,"id":"117-hr-4611","congress":117,"number":"H.R. 4611","kind":"bill","group":"bills","title":"DHS Software Supply Chain Risk Management Act of 2021","title_source":"Short Title(s) as Passed House","official_title":"To direct the Secretary of Homeland Security to issue guidance with respect to certain information and communications technology or services contracts, and for other purposes.","titles":[{"type":"Official Title as Introduced","title":"To direct the Secretary of Homeland Security to issue guidance with respect to certain information and communications technology or services contracts, and for other purposes."},{"type":"Short Titles from RFS (Referred to Senate) bill text","title":"DHS Software Supply Chain Risk Management Act of 2021"},{"type":"Display Title","title":"DHS Software Supply Chain Risk Management Act of 2021"},{"type":"Short Title(s) as Passed House","title":"DHS Software Supply Chain Risk Management Act of 2021"},{"type":"Short Title(s) as Introduced","title":"DHS Software Supply Chain Risk Management Act of 2021"},{"type":"Short Title(s) as Reported to House","title":"DHS Software Supply Chain Risk Management Act of 2021"}],"outcome":"passed_house","law_number":null,"introduced":"2021-07-21","chambers":{"house":{"status":"roll_call","date":"2021-10-20","vote":{"id":"117-2021-h319","question":"On Motion to Suspend the Rules and Pass, as Amended","title":"DHS Software Supply Chain Risk Management Act","result":"Passed","yea":412,"nay":2,"present":0,"not_voting":17,"source":"https://clerk.house.gov/evs/2021/roll319.xml"}},"senate":{"status":"na","date":null,"vote":null}},"president":{"status":"na","date":null},"vice_president_tie_breaker":null,"latest_action":{"text":"Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.","date":"2021-10-21"},"nominees":null,"amendments":[],"other_votes":[],"crs_summary":{"date":"2021-10-20","stage":"Passed House","blocks":[{"k":"h","t":"DHS Software Supply Chain Risk Management Act of 2021"},{"k":"p","t":"This bill requires the Management Directorate of the Department of Homeland Security (DHS) to issue guidance regarding new and existing contracts relating to the procurement of information and communications technology or services."},{"k":"p","t":"The bill requires contractors to submit to DHS a bill of materials, a certification that each item in the bill of materials is free from certain security vulnerabilities or defects affecting the security of the end product or service, a notification of any identified vulnerability or defect, and a plan to mitigate, repair, or resolve any identified vulnerability or defect."},{"k":"p","t":"The Government Accountability Office must report to specified congressional committees with (1) a review of this bill's implementation; (2) information regarding DHS engagement with industry; (3) an assessment of how guidance issued pursuant to this bill complies with Executive Order 14208, relating to improving the nation's cybersecurity; and (4) any recommendations related to improving the supply chain for covered contracts."}],"words":161},"summary":{"main_subject":{"text":"Directs the Secretary of Homeland Security to issue guidance requiring contractors on Department of Homeland Security information and communications technology or services contracts to submit a bill of materials, a security certification, and related notifications.","cites":[{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/4611/text/eh#H9CD20BF340474EF590E609A0BCC2AE26"}]},"core_areas":["Department of Homeland Security guidance on information and communications technology and services contracts","Bill of materials and security vulnerability certification requirements for contractors","Government Accountability Office reporting on implementation"],"what_it_does":[{"text":"Requires the Secretary of Homeland Security, acting through the Under Secretary for Management, to issue guidance with respect to new and existing covered contracts.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/4611/text/eh#H9CD20BF340474EF590E609A0BCC2AE26"}},{"text":"Makes submission of a planned bill of materials with the bid proposal, plus the certification and notifications, a condition on the award of each new covered contract.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/4611/text/eh#H9CD20BF340474EF590E609A0BCC2AE26"}},{"text":"Requires each contractor with an existing covered contract to submit the bill of materials used for the contract upon the covered officer's request, plus the certification and notifications, and to submit updates to a bill of materials in a timely manner when its information changes.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/4611/text/eh#H9CD20BF340474EF590E609A0BCC2AE26"}},{"text":"Requires a certification that each item on the bill of materials is free from all known security vulnerabilities or defects identified in the National Institute of Standards and Technology National Vulnerability Database or any database designated by the Under Secretary, along with notifications of any identified vulnerability or defect and the plan to mitigate, repair, or resolve it.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/4611/text/eh#H9CD20BF340474EF590E609A0BCC2AE26"}},{"text":"Directs the Secretary to instruct covered officers on the processes available to enforce these requirements and when to use them, with the guidance taking effect 180 days after enactment.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/4611/text/eh#H9CD20BF340474EF590E609A0BCC2AE26"}},{"text":"Requires the Comptroller General to report within 1 year of enactment to the Secretary and to the House and Senate homeland security committees, covering implementation, Department engagement with industry, compliance of the guidance with Executive Order 14208, and recommendations on the supply chain for covered contracts.","cite":{"label":"Sec. 2","href":"https://www.congress.gov/bill/117th-congress/house-bill/4611/text/eh#H9CD20BF340474EF590E609A0BCC2AE26"}}],"unexpected":[],"version":{"type":"Engrossed in House","date":"2021-10-20","rule":"passed","href":"https://www.congress.gov/bill/117th-congress/house-bill/4611/text/eh"},"current":true,"model":"claude-sonnet-5-5","approved":"2026-10-15","approved_by":"checks"},"sources":{"congress_gov":"https://www.congress.gov/bill/117th-congress/house-bill/4611","text":"https://www.congress.gov/bill/117th-congress/house-bill/4611/text"},"card":{"image":"card/item/117-hr-4611.png","v":"cd7a926749be","alt":"Votes on Record. H.R. 4611, 117th Congress: DHS Software Supply Chain Risk Management Act of 2021. House: 412 Yea, 2 Nay. Outcome: Passed House, 20 Oct 2021."}}